distro/tests: update DNSSEC bogus test

dnssec-failed.org domain uses RSA/SHA1 algorithm, which is considered
insecure by Fedora 33+ policy.

diff --git a/distro/tests/ansible-roles/knot_resolver/tasks/test_dnssec.yaml b/distro/tests/ansible-roles/knot_resolver/tasks/test_dnssec.yaml
index 990d4ca9423b8c2ad9a5204f0d00642faf39a2b9..52bbbb2f8e07cad72c472a6a04c2e66b533a6362 100644 (file)
--- a/distro/tests/ansible-roles/knot_resolver/tasks/test_dnssec.yaml
+++ b/distro/tests/ansible-roles/knot_resolver/tasks/test_dnssec.yaml
@@ -1,15 +1,15 @@
 ---
 # SPDX-License-Identifier: GPL-3.0-or-later
-- name: dnssec_test dnssec-failed.org +cd returns NOERROR
+- name: dnssec_test bogussig.bad-dnssec.wb.sidnlabs.nl. +cd returns NOERROR
   tags:
     - test
-  shell: kdig +cd @127.0.0.1 dnssec-failed.org
+  shell: kdig +cd @127.0.0.1 bogussig.bad-dnssec.wb.sidnlabs.nl.
   register: res
   failed_when: '"status: NOERROR" not in res.stdout'
 
-- name: dnssec_test dnssec-failed.org returns SERVFAIL
+- name: dnssec_test bogussig.bad-dnssec.wb.sidnlabs.nl. returns SERVFAIL
   tags:
     - test
-  shell: kdig @127.0.0.1 dnssec-failed.org
+  shell: kdig @127.0.0.1 bogussig.bad-dnssec.wb.sidnlabs.nl.
   register: res
   failed_when: '"status: SERVFAIL" not in res.stdout'